Business Continuity Calculator
Score a business continuity programme on plan coverage, exercising, achievable recovery against the MTPD, alternate capacity and supplier contingency.
About Business Continuity Calculator
Recovery capability carries the largest weight and is measured against the MTPD rather than against the RTO in the policy, because the tolerable period is a business constraint while the objective is an aspiration. Exercise coverage is weighted equally with plan coverage on the simple grounds that an unexercised plan has never been shown to work, and cross-training appears because continuity plans routinely name one person who is on holiday. Continuity programmes look healthy on a plan count and fail on the two things nobody measures: whether recovery has ever been demonstrated, and whether anyone other than the author can execute the plan. These are management estimates for programme steering, not an ISO 22301 audit result.
Formula
Business Continuity
Programme score = 0.25 × recovery capability + 0.20 × plan coverage + 0.20 × exercise coverage + 0.12 × alternate capacity + 0.10 × supplier contingency + 0.08 × cross-training + 0.05 × exercise depth.
- recovery capability
- Demonstrated recovery time compared with the MTPD: 100 at half the MTPD, 75 inside it, 35 up to twice it, 0 beyond
- plan coverage
- Processes with a current plan ÷ critical processes
- exercise coverage
- Processes exercised in 12 months ÷ critical processes
Worked example
With the default values below, Business Continuity Calculator returns Continuity Programme Score of 54.1%. Change any input above and every figure here is recalculated in your browser.
Inputs used
- Critical business processesaccepts 1–5,000 processes
- 24 processes
- Processes with a current documented planaccepts 0–5,000 processes
- 19 processes
- Processes exercised in the last 12 monthsaccepts 0–5,000 processes
- 12 processes
- Shortest maximum tolerable period of disruptionaccepts 1–8,760 hours
- 24 hours
- Recovery time you can actually demonstrateaccepts 0–8,760 hours
- 36 hours
- Alternate site or region capacityaccepts 0–100 %
- 60 %
- Key roles with a trained deputyaccepts 0–100 %
- 45 %
- Critical suppliers with a contingency arrangementaccepts 0–100 %
- 50 %
- Most demanding exercise completedone of Full live failover — 100, Functional or simulation exercise — 75, Tabletop walkthrough — 50, None — 0
- Functional or simulation exercise — 75
Results
- Continuity Programme Score
- 54.1%
- Plan Coverage
- 79.2%
- Exercise Coverage
- 50.0%
- Recovery Gap Against the MTPD
- 12.0 hours
- Critical Processes Not Exercised
- 12 processes
- Programme Maturity
- Level 2 — documented but unproven
- Recovery Verdict
- Demonstrated recovery is 12 hour(s) beyond the maximum tolerable period of disruption, so the plan does not meet its own requirement
- Next Action
- Close the recovery gap first — an RTO the organisation cannot demonstrate is the single largest continuity exposure
Step by step
- 1Values used
- 2Business Continuity
- 3Continuity Programme Score= 54.1
- 4Plan Coverage= 79.2
- 5Exercise Coverage= 50.0
- 6Recovery Gap Against the MTPD= 12.0 hours
- 7Critical Processes Not Exercised= 12 processes
- 8Programme Maturity= Level 2 — documented but unproven
Assumptions and limits
- The result is derived only from the 9 inputs listed above. Anything not among them is not part of the calculation.
- In particular, this calculator does not take inflation, tax or fees or charges into account.
- Figures are rounded for display to 1 decimal place, so totals built from several rounded parts can differ slightly from the unrounded arithmetic.
How these calculators are built and tested is described on the Methodology page. If a figure looks wrong, please report it.
Frequently Asked Questions
How is Business Continuity calculated?
Programme score = 0.25 × recovery capability + 0.20 × plan coverage + 0.20 × exercise coverage + 0.12 × alternate capacity + 0.10 × supplier contingency + 0.08 × cross-training + 0.05 × exercise depth. Recovery capability carries the largest weight and is measured against the MTPD rather than against the RTO in the policy, because the tolerable period is a business constraint while the objective is an aspiration. Exercise coverage is weighted equally with plan coverage on the simple grounds that an unexercised plan has never been shown to work, and cross-training appears because continuity plans routinely name one person who is on holiday.
Why does Business Continuity matter?
Continuity programmes look healthy on a plan count and fail on the two things nobody measures: whether recovery has ever been demonstrated, and whether anyone other than the author can execute the plan. These are management estimates for programme steering, not an ISO 22301 audit result.
What values do I need to enter?
This calculator takes 9 inputs: Critical business processes, Processes with a current documented plan, Processes exercised in the last 12 months, Shortest maximum tolerable period of disruption, Recovery time you can actually demonstrate, Alternate site or region capacity, Key roles with a trained deputy, Critical suppliers with a contingency arrangement, Most demanding exercise completed. The pre-filled defaults are a realistic starting point — replace them with figures from your own environment for a result you can act on.
Why measure against the MTPD rather than the RTO?
Because the RTO is a target you chose and the MTPD is a limit the business imposes. If demonstrated recovery beats the RTO but breaches the MTPD, the RTO was set wrong; if it beats the MTPD but misses the RTO, you have a tuning problem rather than a survival problem.
Is a tabletop exercise good enough?
It is far better than nothing and it is where most gaps in decision-making and communication surface cheaply. What it cannot tell you is whether the technical recovery works, which is why exercise depth is scored separately and a live failover scores highest.
Related Calculators
You might also need
- Disaster Recovery RTO CalculatorCommonly used together
- Business Impact Analysis CalculatorCommonly used together
- Third-Party Risk CalculatorCommonly used together
- Cyber Resilience CalculatorCommonly used together
- Vendor Risk CalculatorCommonly used together
- Disaster Recovery RPO CalculatorCommonly used together
